From the category archives:

Active Directory/LDAP

Auditing Distribution Group Membership Changes

November 17, 2010

Exchange 2010 includes Administrator Audit Logging functionality to log all administrator actions. Because all administrator actions, including those taken using the EMC and the new web-based ECP consoles must fire off a Shell command under the hood, admin audit logging records cmdlets that can make changes (the ones that use the New and Set verbs, [...]

Read the full article →

Exchange Quick Audit: mailboxes created in last 7 days

June 24, 2008

I remember writing plenty of scripts to report on different things such as user accounts created every week/month, user accounts modified, accounts disabled, etc. for SOX compliance. Some of those scripts used to be rather long, and in hindsight— involved a lot more lines of code than an administrator should have to write. Although I [...]

Read the full article →

Modifying Display Templates and additional attributes

June 20, 2008

Recently got a question about customizing the GAL and my previous post that talks about it: “HOW TO: Modify Display Template to make default email address appear in Address Book/GAL“. In Exchange 2010/2007, the new Details Template Editor can be found in EMC | Tools. The editor makes it much easier to modify templates and [...]

Read the full article →

HOW TO: List mailboxes with Full Mailbox Access permission assigned

February 5, 2008

In “HOW TO: Grant Full Mailbox Access permission“, we saw how to assign and view mailbox permissions, including Full Access. Here’s how you can get a list of mailboxes with explicitly-assigned (i.e. not inherited) Full Access permissions. You can specify a single mailbox and retrieve the permissions assigned on it by using the Get-MailboxPermission cmdlet. [...]

Read the full article →

HOW TO: Hide Distribution Group membership

November 1, 2007

Exchange Server 2003′s extensions for Active Directory Users & Computers console made hiding a Distribution Group’s membership a trivial task, accomplished by right-clicking a group, selecting Exchange Tasks and selecting Hide Membership. Figure 1: The Exchange Tasks wizard in ADUC provides an option to hide Distribution Group membership in Exchange Server 2003 As the task [...]

Read the full article →

HOW TO: Grant Full Mailbox Access permission

June 28, 2007

Follow-up to previous post “HOW TO: Assign SendAs right using Exchange shell” – the ability to assign SendAs and ReceiveAs permissions is preserved in Active Directory Users & Computers (ADUC), but the ability to grant Full Mailbox Access permission isn’t available. Full Mailbox Access is a mailbox permission (without getting into a debate about what’s [...]

Read the full article →

View membership of a Dynamic Distribution Group

May 30, 2007

Dynamic Distribution Group is the Exchange Server 2010/2007 term for Query-Based Distribution Groups supported by Active Directory (and therefore Exchange Server 2003/2000) in Windows Server 2003. Unlike normal security and distribution groups, which have static membership (defined by manually adding users/recipients as members of the group), the membership of a Dynamic Distribution Group is determined [...]

Read the full article →

Applying Managed Folder Policy to more than one user

May 16, 2007

Scenario: You have a Managed Folder Mailbox Policy called Policy-DeletedItems90Days. The policy has Managed Content Settings to permanently delete items in the Deleted Items folder after 90 days. You can easily apply this Managed Folder Mailbox Policy to a single user using the Exchange console, as shown in Figure 1. Figure 1: Applying a Managed [...]

Read the full article →

HOW TO: Send as alternate email address

April 13, 2007

This is one of the more frequently asked questions in different forums – how do I send as an alternate address (aka proxy address or alias)? You can use Exchange Server’s Email Address Policies (Exchange Server 2010/2007) or Recipient Pollicies (Exchange 2003), or the E-mail Addresses tab in EMC (Exchange 2010/2007) or Active Directory Users [...]

Read the full article →

HOW TO: Assign SendAs right using Exchange shell

March 7, 2007

In Exchange Server 2007 (and Exchange 2010), recipients are managed from the Exchange Management Console (EMC) or Exchange Management Shell (aka the Shell). EMC does not have a Security tab for recipients. You can still use Active Directory Users & Computers (ADUC) console to modify permissions on a recipient, as the documentation suggests ["How to [...]

Read the full article →

← Previous Entries